krab19cc[.]com

The domain krab19cc.com was registered on May 09, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently listed as active with a high risk rating. The sole page title observed is "krab19.cc", providing no additional context about the hosted content. No further page content has been disclosed, leaving the payload and targeted victims uncertain at this stage.

Infrastructure analysis shows that krab19cc.com resolves to the IP address 104.21.54.77, which is owned by Cloudflare, Inc. and geolocated in Canada. The domain is delegated to the Cloudflare name servers roxy.ns.cloudflare.com and yevgen.ns.cloudflare.com, and serves an HTTPS certificate issued by Google Trust Services under the WE1 hierarchy. HTTP requests return a 301 redirection response, indicating that the site is actively forwarding traffic, but the final destination remains unverified.

Reputation data indicates a Gridinsoft trust score of 0 out of 100, and VirusTotal has flagged the domain by one of its 95 security vendors. The domain appears in a single AlienVault OTX pulse and is blocked by the PhishDestroy filter. It is also present on one additional security blocklist, confirming that independent threat feeds have identified it as malicious. These signals collectively reinforce the high‑risk classification despite the limited detection coverage.

Defenders should prioritize immediate containment of krab19cc.com by adding it to network and email blocklists, and by enforcing DNS sinkholing where feasible. Continuous monitoring of the associated IP address and any observed redirects is advised, as the site may later serve credential‑stealing pages or other phishing payloads. Integration of the domain into threat‑intelligence platforms will ensure updates are propagated to downstream security controls, reducing exposure to this emerging phishing infrastructure.